Re: [squid-users] Squid NTLM acl

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Thu, 06 Jun 2002 11:05:24 +0200

"Segree, Gareth" wrote:
>
> I have the following in my squid.conf
>
> authenticate_program /usr/bin/smb_auth -W DOM1 -U PDC1
> acl domainusers proxy_auth REQUIRED
> acl restrict_users proxy_auth "/etc/squid/users"
> acl restrict_domain dstdom_regex yahoo
> http_access deny !restrict_domain restrict_users
> http_access allow domainusers
>
> 1) When the user accesses yahoo they are prompted for username and pwd even
> thoug the site comes up. WHY?
> I then enter the user & password and the login prompt comes back up.

Probably because yahoo links images from a site not matching your
dstdom_regex, and as you have restrict_users as the last ACL these users
will be matched by they will be prompted for a new password when trying
to fetch these images.

If in doubt, see your access.log.

Try changing the order of the deny line to
http_access deny restrict_users !restrict_domain

Regards
Henrik
Received on Thu Jun 06 2002 - 03:06:33 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:08:28 MST